$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/a977d35e-7266-30b6-99bf-a0b44b910566.roa File: a977d35e-7266-30b6-99bf-a0b44b910566.roa (raw, json) Hash identifier: OW2dwuYFhGHJTwUJVCXV1BpGtpUKMPLExN00kbBXpZo= Subject key identifier: F5:4D:03:D8:E1:6D:01:85:88:27:6A:45:11:CF:79:E8:CC:9C:B1:51 Certificate issuer: /CN=4d6b4eca-7a87-4187-a148-4e7798b97016 Certificate serial: 010D0C9F4328584BAC2F64B33098CB4DEB6F2EE0 Authority key identifier: 48:77:84:9A:55:A4:FE:44:A7:CC:83:FF:88:AF:3F:A7:1D:D8:B4:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/a977d35e-7266-30b6-99bf-a0b44b910566.roa Signing time: Tue 28 Oct 2025 14:42:14 +0000 ROA not before: Tue 28 Oct 2025 14:42:14 +0000 ROA not after: Mon 26 Jan 2026 15:42:14 +0000 asID: 174 IP address blocks: 23.148.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/4d6b4eca-7a87-4187-a148-4e7798b97016.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/4d6b4eca-7a87-4187-a148-4e7798b97016.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:2f:64:b3:30:98:cb:4d:eb:6f:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d6b4eca-7a87-4187-a148-4e7798b97016 Validity Not Before: Oct 28 14:42:14 2025 GMT Not After : Jan 26 15:42:14 2026 GMT Subject: CN=7c3796cd-4672-4a43-b324-add60f58b17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:d1:53:1c:34:36:7c:68:9a:02:c4:d5:2b: 27:95:ad:2c:8a:1e:53:b5:c1:7d:72:7d:14:67:20: fb:5f:a2:64:e8:42:7c:13:00:85:ee:09:32:68:e7: fd:d0:6b:fe:3d:fa:f6:a1:4a:09:72:04:4b:06:1e: 9d:59:4b:82:45:d5:e1:c0:35:17:99:4e:e8:08:24: eb:ea:4c:cf:17:89:9d:77:cf:3c:af:d5:b7:41:06: 93:e8:ca:be:93:b0:65:54:10:a5:16:2d:7d:93:93: c4:ad:04:dc:7d:81:16:db:7e:19:0f:f3:e7:ab:b3: ce:6c:b1:c7:91:d0:15:bf:d1:7e:80:10:ab:5e:9b: 8d:09:d4:ec:c6:b8:9e:04:d3:3d:1c:67:d2:cf:13: af:23:52:cb:aa:74:de:e1:f8:8b:e8:04:12:08:c8: b1:8b:b9:48:e4:00:74:22:8a:77:0b:46:88:6a:9a: 63:5c:1f:e3:1d:a9:a0:e6:77:88:13:a3:d2:5e:c8: 62:e5:82:cf:81:49:03:64:82:4b:a3:a9:a1:29:bb: ea:39:e0:c3:3c:dd:0d:a4:21:87:8e:d2:c5:8b:7a: d3:1a:66:63:61:80:e2:45:04:9f:23:95:44:91:d8: f4:16:11:a4:21:b3:18:96:50:ac:2c:cc:a8:65:eb: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4D:03:D8:E1:6D:01:85:88:27:6A:45:11:CF:79:E8:CC:9C:B1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/a977d35e-7266-30b6-99bf-a0b44b910566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/4d6b4eca-7a87-4187-a148-4e7798b97016.crl X509v3 Authority Key Identifier: keyid:48:77:84:9A:55:A4:FE:44:A7:CC:83:FF:88:AF:3F:A7:1D:D8:B4:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016.cer sbgp-ipAddrBlock: critical IPv4: 23.148.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ac:ed:c8:e9:b9:f4:86:e9:e5:6e:5c:82:2e:6b:88:b8:b1: d8:fb:2b:a0:29:ef:74:95:1e:a1:a2:3a:21:83:75:b5:21:1c: cb:a5:f4:db:4b:13:36:16:d2:72:96:27:69:c1:30:df:8a:5d: 1b:05:e7:c3:be:1a:5b:91:88:96:1b:67:0b:1b:b1:25:9d:c2: 18:b2:fe:a1:30:2b:b7:f7:3e:1e:5f:79:70:88:1f:86:7e:9a: 40:ba:29:ed:64:58:78:58:a5:99:75:6b:a8:5d:23:a8:21:99: 14:5a:21:55:90:a9:71:17:d7:91:3b:73:ee:c2:78:1f:45:f2: 66:4a:99:b2:fd:fb:2b:f6:e5:25:9e:ce:67:1a:8e:90:14:36: da:7c:31:50:56:3d:d1:26:c9:41:82:04:b9:9e:95:1d:a7:21: e9:30:c0:18:38:bc:27:48:40:51:be:4d:94:8a:b2:ae:56:ee: 35:5c:6e:28:f3:e9:eb:2e:c6:38:6a:36:af:95:a5:e6:99:23: f8:9a:ba:02:95:14:ac:cd:82:45:50:83:fc:c5:f5:b2:93:b2: 09:88:89:15:2c:af:6b:b4:60:b2:96:30:ac:84:12:0e:9e:c0: 14:9b:cd:da:e6:56:3d:da:b9:30:2c:a6:23:1d:82:72:d4:03: 4a:ce:7d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEusL2SzMJjLTetvLuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ2YjRlY2EtN2E4Ny00MTg3LWExNDgtNGU3Nzk4Yjk3 MDE2MB4XDTI1MTAyODE0NDIxNFoXDTI2MDEyNjE1NDIxNFowLzEtMCsGA1UEAxMk N2MzNzk2Y2QtNDY3Mi00YTQzLWIzMjQtYWRkNjBmNThiMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9DRUxw0NnxomgLE1Ssnla0sih5TtcF9cn0U ZyD7X6Jk6EJ8EwCF7gkyaOf90Gv+Pfr2oUoJcgRLBh6dWUuCRdXhwDUXmU7oCCTr 6kzPF4mdd888r9W3QQaT6Mq+k7BlVBClFi19k5PErQTcfYEW234ZD/Pnq7PObLHH kdAVv9F+gBCrXpuNCdTsxrieBNM9HGfSzxOvI1LLqnTe4fiL6AQSCMixi7lI5AB0 Iop3C0aIappjXB/jHamg5neIE6PSXshi5YLPgUkDZIJLo6mhKbvqOeDDPN0NpCGH jtLFi3rTGmZjYYDiRQSfI5VEkdj0FhGkIbMYllCsLMyoZeub3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVNA9jhbQGFiCdqRRHPeejMnLFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZDZi NGVjYS03YTg3LTQxODctYTE0OC00ZTc3OThiOTcwMTYvYTk3N2QzNWUtNzI2Ni0z MGI2LTk5YmYtYTBiNDRiOTEwNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGQ2YjRlY2EtN2E4Ny00MTg3LWEx NDgtNGU3Nzk4Yjk3MDE2LzRkNmI0ZWNhLTdhODctNDE4Ny1hMTQ4LTRlNzc5OGI5 NzAxNi5jcmwwHwYDVR0jBBgwFoAUSHeEmlWk/kSnzIP/iK8/px3YtLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZDZiNGVjYS03YTg3LTQxODctYTE0OC00ZTc3 OThiOTcwMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5REMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEus7cjpufSG6eVuXIIua4i4sdj7K6Ap73SVHqGiOiGDdbUhHMul9NtL EzYW0nKWJ2nBMN+KXRsF58O+GluRiJYbZwsbsSWdwhiy/qEwK7f3Ph5feXCIH4Z+ mkC6Ke1kWHhYpZl1a6hdI6ghmRRaIVWQqXEX15E7c+7CeB9F8mZKmbL9+yv25SWe zmcajpAUNtp8MVBWPdEmyUGCBLmelR2nIekwwBg4vCdIQFG+TZSKsq5W7jVcbijz 6esuxjhqNq+VpeaZI/iaugKVFKzNgkVQg/zF9bKTsgmIiRUsr2u0YLKWMKyEEg6e wBSbzdrmVj3auTAspiMdgnLUA0rOfck= -----END CERTIFICATE-----Generated at Wed Nov 5 03:22:27 2025 by rpki-client